diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 395e71cea74..e7209d0f74d 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -45,12 +45,12 @@ jobs:
           git checkout HEAD^2
       -
         name: Initialize CodeQL
-        uses: github/codeql-action/init@v3.31.0
+        uses: github/codeql-action/init@v3.31.6
         with:
           languages: ${{ matrix.language }}
       -
         name: Autobuild
-        uses: github/codeql-action/autobuild@v3.31.0
+        uses: github/codeql-action/autobuild@v3.31.6
       -
         name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3.31.0
+        uses: github/codeql-action/analyze@v3.31.6
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index bbc0f5d9688..bc37162b91e 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false